Apply highly reliable public options such as Google ( 8.8.8.8 / 8.8.4.4 ) or Cloudflare ( 1.1.1.1 ).
If the GUI remains empty, use the following CLI commands to see the real-time interaction between your firewall and the DDNS servers:
: Go to Network > Interfaces , edit the WAN interface, and ensure Override internal DNS is disabled . Apply highly reliable public options such as Google ( 8
If the list still won't load automatically, you can manually point the device to a known FortiGuard DDNS server IP: For Anycast disabled: 173.243.138.226 Alternative: 173.243.138.225 config system fortiguard ddns-server-ip Use code with caution. Copied to clipboard 5. Restart the DDNS Daemon
: The FortiGate is routing traffic out of the wrong interface or its source IP is being blocked. Copied to clipboard 5
If issue persists after above steps:
Troubleshooting: "Unable to Load FortiGuard DDNS Server List" on FortiGate edit the WAN interface
Open a CLI session and run a packet capture filtered for FortiGuard traffic to see if packets are leaving and returning: diagnose sniffer packet any "port 443 or port 8888" 4 100 a Use code with caution.
config system fortiguard set fortiguard-anycast disable set ddns-server-ip 173.243.138.226 end
The issue stems from five primary operational or infrastructure-level conflicts: